Privacy Policy for RateMate Energy LLC

1. Information We Collect

2. How We Use Your Information

We use your information to:

• Provide and improve our Services, including analyzing bills, comparing energy rates, recommending plans, and assisting with utility rate plan enrollments.
• Communicate with you (e.g., respond to inquiries, send updates, confirm enrollments).
• Verify identity, prevent fraud, and secure your account.
• Perform internal analytics, research, and product enhancements—often using aggregated or de-identified data (which cannot reasonably identify you) to improve services, support energy efficiency initiatives, or participate in energy markets (e.g., demand response programs).
• Comply with legal obligations, respond to subpoenas, court orders, or protect our rights.

3. How We Share Your Information

We do not sell your personal information. We may share it in limited circumstances:

• With your utility (e.g., Con Edison) to verify authorization, comply with requirements, or facilitate data access.
• With authorized energy suppliers, partners, or grid operators for enrollment, rate fulfillment, verification of energy savings, or program participation (only with your consent).
• With service providers (e.g., cloud hosting, analytics, payment processors, customer support) who are contractually bound to protect your data and use it only for our purposes.
• To comply with laws, regulations, legal processes, or protect safety/rights.
• In connection with a business transfer (e.g., merger or acquisition).
• With your explicit consent or at your direction.

Aggregated or de-identified data (non-personal) may be shared for research, analytics, or industry purposes.

4. Authorization and Revocation for Utility Data Access

When using our Services involving utility data, you may authorize us to access your data securely from your utility provider using industry-standard methods (e.g., secure APIs, OAuth, Green Button Connect My Data®, or equivalent). This authorization is customer-initiated, limited to the scope and duration you approve, and used only for the Services you request.

Revoking Authorization: You can revoke access at any time by emailing [email protected], using a link in your account dashboard/email, or contacting us directly. Upon revocation:

• We will cease collecting new data.
• Disable access to your utility account.
• Delete stored utility-related data (subject to legal retention requirements) within 30 days.

Revocation does not affect data already shared with authorized parties (e.g., suppliers) or aggregated/de-identified data.

5. Handling of Authentication Credentials

If you provide utility login credentials or tokens for data retrieval, they are:

• Used temporarily and securely (e.g., encrypted in transit).
• Not stored long-term—we delete them after establishing access or upon revocation.
• Never shared with third parties.

6. Data Security

We use reasonable administrative, technical, and physical safeguards (e.g., encryption, access controls, secure protocols) to protect your information. However, no system is completely secure, and we cannot guarantee absolute security. In the event of a data breach, we will notify affected individuals and authorities as required by law.

7. Data Retention

We retain personal information and utility data (such as interval data, current rate plans, service addresses, account numbers, historical usage, and billing information) for as long as necessary to provide and improve our Services, including ongoing rate comparisons, historical bill analysis, personalized recommendations, and customer account management, or as required to fulfill legal obligations, resolve disputes, enforce agreements, or comply with regulatory requirements (e.g., audit, tax, or utility program purposes).

You can request deletion of your personal information and utility data at any time by contacting us via email at [email protected] or through your account dashboard if available. Upon such a request, we will delete your data within a reasonable timeframe (typically 30 days), except where retention is required for legal, regulatory, audit, or compliance purposes (e.g., to document prior authorizations or respond to disputes).

8. Your Privacy Rights

Depending on your location and applicable laws, you may have rights including:

• Access to your personal information.
• Correction of inaccurate data.
• Deletion of certain data (subject to exceptions).
• Opt-out of certain processing/sharing.

Request Process: Submit verifiable requests to [email protected]. We will verify your identity (e.g., via email or account confirmation) and respond within a reasonable timeframe (typically 30-45 days). You may authorize an agent to act on your behalf with written permission. Up to two free requests per 12 months; excessive requests may incur reasonable fees.

9. Children's Privacy

Our Services are not directed to children under 16. We do not knowingly collect personal information from children. If you believe that we might have personal information from a child under 16, please contact us at [email protected], so we may delete the information.

10. Compliance and Standards

We comply with applicable privacy laws and industry standards for energy data access, including protocols like Green Button Connect My Data® (where used) and principles from voluntary programs like DataGuard Energy Data Privacy. We prioritize customer consent, security, and transparency in handling utility data.

11. Changes to This Policy

We may update this Policy. Material changes will be posted here with the updated date, and we may notify you via email or site notice if they significantly affect your rights. Continued use after changes constitutes acceptance.

12. Contact Us

For questions, rights requests, revocation, or concerns: